This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft File: X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft (raw, json) Hash identifier: Y1XG4tsVCsPI8aNREzdzBbChezAjEMw8yU0dqOjrlyo= Subject key identifier: 01:79:E9:4F:0A:99:6F:5E:94:79:C8:62:19:7D:32:A9:81:86:91:AE Authority key identifier: 5F:62:FE:78:D2:31:9F:3F:C1:F1:58:2F:37:C6:4A:03:DA:EF:79:4B Certificate issuer: /CN=5f62fe78d2319f3fc1f1582f37c64a03daef794b Certificate serial: 019C42EAFEB588F681FA40FBB3F9ED7309B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft Manifest number: 13 Signing time: Mon 09 Feb 2026 15:00:22 +0000 Manifest this update: Mon 09 Feb 2026 15:00:22 +0000 Manifest next update: Tue 10 Feb 2026 15:00:22 +0000 Files and hashes: 1: X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl (hash: MoydeRMvqKd/4dY02wBMEEauAEVs2tshhRugt3oYx6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fe:b5:88:f6:81:fa:40:fb:b3:f9:ed:73:09:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f62fe78d2319f3fc1f1582f37c64a03daef794b Validity Not Before: Feb 9 15:00:22 2026 GMT Not After : Feb 10 15:00:22 2026 GMT Subject: CN=0179e94f0a996f5e9479c862197d32a9818691ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:bc:39:5f:14:a8:30:af:74:c5:d0:fd:97: ea:4f:29:24:9b:09:ea:f9:82:25:79:e7:2d:13:9f: e3:49:5d:83:88:27:8f:7c:ce:a3:59:ec:6e:ac:28: 56:3b:82:41:7f:9b:9a:02:50:53:4c:e9:4e:24:bd: e5:47:b1:01:12:01:7c:38:4f:e1:45:e3:2c:15:59: 59:bf:97:0d:64:5e:b4:12:66:38:51:94:6b:a8:69: 47:73:af:d4:eb:c3:32:29:1f:53:77:6d:4a:9c:44: ce:2f:f9:24:d4:12:c9:aa:ec:4a:99:e3:c2:d5:22: 61:90:88:d6:d3:2f:da:63:76:24:23:e5:2d:ea:31: 47:99:0a:3d:0f:f5:66:26:28:94:1b:85:c4:8c:b3: e4:c0:93:e8:20:40:e3:d0:b6:dd:67:4f:b1:41:3f: 19:f5:54:97:49:ee:b7:36:b0:b2:ca:3a:97:b4:19: b0:fc:af:a8:1f:4a:17:3e:e3:34:ac:35:9f:76:e0: 5c:db:04:fc:3f:ab:e2:df:95:03:fa:44:c1:72:9b: 14:35:57:3b:a7:3b:95:09:98:ce:86:4e:07:bc:36: 24:35:ab:25:bb:64:4e:76:38:54:5f:aa:34:0f:29: 07:0e:d9:3f:6f:5c:48:e0:7d:88:bc:3d:fe:83:c9: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:79:E9:4F:0A:99:6F:5E:94:79:C8:62:19:7D:32:A9:81:86:91:AE X509v3 Authority Key Identifier: keyid:5F:62:FE:78:D2:31:9F:3F:C1:F1:58:2F:37:C6:4A:03:DA:EF:79:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2L-eNIxnz_B8VgvN8ZKA9rveUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/1f1307-6396-41c0-a505-054bfdafd88a/1/X2L-eNIxnz_B8VgvN8ZKA9rveUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d3:2d:2c:0c:72:0e:c7:18:90:23:e9:b7:24:da:f6:d2:41: 75:d3:37:d7:ce:9a:de:58:62:f5:26:0f:3c:0c:53:ee:d2:5d: af:1d:66:61:ab:bc:ab:c1:e4:fd:ba:f2:9f:12:8c:ea:97:65: e1:75:33:e0:f8:74:1d:9e:84:57:39:b0:87:d5:01:e1:96:37: 4c:19:67:82:af:9a:a6:6f:9b:27:08:30:7f:82:54:c8:f2:0d: 97:99:f0:20:e4:ce:e1:7b:8f:e1:47:17:bd:d3:7c:e4:62:1b: 28:93:78:da:1a:c9:1f:2d:9f:dd:4e:d6:db:b4:77:0c:7e:fe: ef:c8:92:b1:3e:91:be:07:c3:49:2c:f3:84:ed:2e:f4:37:3b: 43:de:15:f2:05:e1:6f:fa:66:8c:34:08:68:62:b0:c4:ed:ca: 6b:a3:62:5f:6a:f0:1d:2c:a4:bc:f6:06:7e:42:0f:d3:a8:1a: ce:f2:41:a6:8d:d2:e8:6c:3b:68:4d:72:ee:73:ca:6d:91:ce: 4e:cb:a0:b0:bb:d6:6d:7f:06:6b:9b:83:de:60:99:a5:5f:67: d6:1b:71:d5:6f:ab:c8:81:95:fb:3d:ef:a8:52:aa:af:26:77: dd:6a:ac:35:b9:c3:03:ff:f0:83:18:47:6e:aa:32:34:78:6f: e5:82:6b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6v61iPaB+kD7s/ntcwm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjJmZTc4ZDIzMTlmM2ZjMWYxNTgyZjM3YzY0YTAzZGFl Zjc5NGIwHhcNMjYwMjA5MTUwMDIyWhcNMjYwMjEwMTUwMDIyWjAzMTEwLwYDVQQD EygwMTc5ZTk0ZjBhOTk2ZjVlOTQ3OWM4NjIxOTdkMzJhOTgxODY5MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPC8OV8UqDCvdMXQ/ZfqTykkmwnq +YIleectE5/jSV2DiCePfM6jWexurChWO4JBf5uaAlBTTOlOJL3lR7EBEgF8OE/h ReMsFVlZv5cNZF60EmY4UZRrqGlHc6/U68MyKR9Td21KnETOL/kk1BLJquxKmePC 1SJhkIjW0y/aY3YkI+Ut6jFHmQo9D/VmJiiUG4XEjLPkwJPoIEDj0LbdZ0+xQT8Z 9VSXSe63NrCyyjqXtBmw/K+oH0oXPuM0rDWfduBc2wT8P6vi35UD+kTBcpsUNVc7 pzuVCZjOhk4HvDYkNaslu2ROdjhUX6o0DykHDtk/b1xI4H2IvD3+g8nQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAF56U8KmW9elHnIYhl9MqmBhpGuMB8GA1UdIwQY MBaAFF9i/njSMZ8/wfFYLzfGSgPa73lLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xZjEzMDctNjM5Ni00MWMwLWE1MDUt MDU0YmZkYWZkODhhLzEvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xZjEzMDctNjM5Ni00MWMwLWE1MDUtMDU0YmZkYWZkODhh LzEvWDJMLWVOSXhuel9COFZndk44WktBOXJ2ZVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdMtLAxy DscYkCPptyTa9tJBddM3186a3lhi9SYPPAxT7tJdrx1mYau8q8Hk/brynxKM6pdl 4XUz4Ph0HZ6EVzmwh9UB4ZY3TBlngq+apm+bJwgwf4JUyPINl5nwIOTO4XuP4UcX vdN85GIbKJN42hrJHy2f3U7W27R3DH7+78iSsT6RvgfDSSzzhO0u9Dc7Q94V8gXh b/pmjDQIaGKwxO3Ka6NiX2rwHSykvPYGfkIP06gazvJBpo3S6Gw7aE1y7nPKbZHO TsugsLvWbX8Ga5uD3mCZpV9n1htx1W+ryIGV+z3vqFKqryZ33WqsNbnDA//wgxhH bqoyNHhv5YJrOw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:26 2026 by rpki-client